The Incidents page displays all incidents for your Barracuda Forensics & Incident Response account, along with the suspicious email associated with each incident.
Note that after an email has been remediated in any way, that email will only be visible from within the incident on the Incidents page. The email will no longer appear in searches, on the location map, or in user-reported emails.
To review incidents:
- Log into Barracuda Forensics & Incident Response.
- In the left pane, click the menu () icon to toggle the menu, and click Incidents.
- In the Incidents screen, locate the incident you want to investigate and click VIEW INCIDENT.
- The top of the page view basic information about the incident, including your search terms and how many messages were received by unique recipients. You can also view a list of remediation actions you chose to take on the reported incident displays.
Note that you cannot turn on Continuous Remediation if you did not choose to delete messages when you created the incident.
- Select the Email tab to view the following information. Click Export to CSV to export this data.
- Dates emails were received
- Sender emails
- Recipient emails
Status of actions taken, if any
Status options include:
Email successfully removed from the user's inbox, or
User removed email from their inbox
Email could not be removed from the user's inbox
Email successfully removed from the user's inbox during Continuous Remediation Email could not be removed from the user's inbox during Continuous Remediation
No remediation actions taken for this inbox/user
- Click the View Email ( ) icon to view a copy of the email in question, along with its header information.
- Select the Users tab to view:
- Users involved in this incident
- Whether a user clicked on a link within the email
- Whether a user replied to or forwarded the email to other users
- Click the Incidents breadcrumb or use your browser's Back button to return to the Incidents page.
To create a new incident from within the Incidents page, refer to Creating an Incident.